Enabling Help Desk to create users and roaming files

I would like to know if anyone has come across the restriction surrounding non Server Administrators from creating sub-directories in Domino folders.

My scenario is this:

I have created a ‘User Registration’ Database that enables Help Desk staff to enter a new user’s name, password and location. I have then coded an agent to register new users based on these values as well as default mail templates and other registration settings.

This code uses the RegisterNewUser method of the NotesRegistration class.

When I hit the ‘Register User’ button it works great. Mail file and roaming files are created automatically.

If I get the Help Desk to do it, everything works except for the creation of the roaming files. No folder and no files, but the person document indicates that the roaming files exist and that the user is ‘roaming’ when in fact their files do not exist.

I played around with security settings and agent execution levels before finding out that the user must be a ‘server administrator’ to be able to create folders on the server.

This is a real pain as I do not want to give the Help Desk Server Administrator access to every mail server where the roaming files reside.

Has anyone come across this issue or have any suggestions how to get around it, short of putting the Help Desk in the Administrator field of the server document.

I cannot create the folder prior to registering a user as I get the error that the sub-directory already exists and the registration fails.

The option of creating the files after the registration is one option, but not convenient.

Thanks for any help or suggestions!

Mick

Subject: can’t you…

…have an agent create the sub-folders and files that is signed by a Server Administrator and runs with the signer’s (not the current user’s) credentials? You could use NotesAgent.RunOnServer() in LotusScript, or Agent.runOnServer() in Java, to accomplish that.

Subject: It’s an option

It is an option to retrospecively set-up the roaming files via a server agent, but not as clean as I would like.

I attempted to set-up a server agent to do the whole resgitration process, but now I have the problem that the certifier ID’s aren’t accessable by the server (they reside on a share).

More to work out…

Subject: Possible

Have tested this and as long as the roaming files are created in the background it works at registration. An error message is still generated on the client but the folder and roaming files are created.

This can be set in the registration policy.